Is Canvas Hack Boost safe?

Clean risk

Canvas Hack Boost spoofs tab visibility and auto-fills Canvas quiz answers from the student's past submissions.

On Canvas quiz pages, the extension overrides document.hidden, visibilityState and focus checks and blocks focus, blur and visibilitychange listeners, so switching tabs is not detected. It also uses the student's logged-in Canvas session to fetch earlier submission history through the Canvas API and fills the matching answers into the quiz page.

0Risk
Who publishes it

VTR - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
VTR

Same store account

1 other listing published from this account, 2k+ users between them, none of them carrying a finding.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

data.canvashack.com
Also called by 1 other listing: Canvas Hack
server.canvashack.com
Also called by 1 other listing: Canvas Hack

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 15 October 2026khaglmimjjlabnjnkaebfajhfkpchpjd